CVE-2019-20085 – TVT NVMS-1000 Directory Traversal Vulnerability

https://notcve.org/view.php?id=CVE-2019-20085

TVT NVMS-1000 devices allow GET /.. Directory Traversal Los dispositivos TVT NVMS-1000, permiten un Salto de Directorio de GET /.. TVT NVMS 1000 suffers from a directory traversal vulnerability. TVT devices utilizing NVMS-1000 software contain a directory traversal vulnerability via GET /.. requests. • https://www.exploit-db.com/exploits/48311 http://packetstormsecurity.com/files/157196/TVT-NVMS-1000-Directory-Traversal.html https://www.exploit-db.com/exploits/47774 - • CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') •